A critical DotNetNuke vulnerability allows attackers to upload malicious SVG files, execute XSS, and gain server control through authenticated user actions.
‘Chaining vulnerabilities is the hallmark of a sophisticated attack’: 750,000 websites must be patched as Microsoft’s popular open source Dotnetnuke CMS hit by an XSS flaw that allows attackers to hijack admin sessions and take over entire web servers
RELATED ARTICLES